Network operation firewall engineer

Job Summary
We are seeking a skilled Network Operations Firewall Engineer to join our IT infrastructure team remotely. The ideal candidate will manage, maintain, and support enterprise firewall systems, ensuring robust network security, compliance, and availability. This role is perfect for a seasoned network security professional with extensive experience in firewall configuration, troubleshooting, and incident response.

Key Responsibilities

• Monitor, manage, and support enterprise firewalls and security appliances, including Palo Alto, Cisco ASA/Firepower, Fortinet, and Check Point.

• Implement firewall rule changes, NAT, VPN configurations, and policy updates in alignment with change management processes.

• Ensure firewall policies comply with organizational security standards and business requirements.

• Troubleshoot and resolve network security incidents and connectivity issues.

• Maintain comprehensive network documentation, including topology diagrams, rule sets, and change logs.

• Collaborate with IT, Security, and Application teams to design and maintain secure network architectures.

• Participate in security audits, providing firewall data and support as needed.

• Conduct periodic reviews of firewall rulesets to remove redundant or outdated entries.

• Monitor firewall logs and alerts for potential threats or policy violations.

• Participate in on-call rotations and support during incidents or scheduled maintenance.

Mandatory Skills & Qualifications

• 10+ years in network operations or firewall engineering.

• Hands-on expertise with one or more enterprise firewall platforms:

  • Palo Alto Networks (Pan-OS, Panorama)

  • Cisco ASA / Firepower / FTD

  • Fortinet FortiGate

  • Check Point

• Strong understanding of TCP/IP, routing, switching, NAT, VLANs, ACLs, subnets, and DNS.

• Experience with VPN technologies (IPSec, SSL VPN, Remote Access, Site-to-Site).

• Familiarity with network segmentation, access control, and zero-trust principles.

• Experience with SIEM tools and log analysis for security monitoring.

• Ability to analyze packet captures using Wireshark or similar tools.

• Experience with change management and ticketing systems (e.g., ServiceNow, Remedy).

• Preferred Certifications (at least one):

  • PCNSE (Palo Alto Networks Certified Network Security Engineer)

  • CCNP Security

  • Fortinet NSE4+

  • Check Point CCSA/CCSE

Preferred Skills (Nice to Have)

• Scripting for firewall automation (Python, Bash, PowerShell).

• Experience with cloud firewalls (AWS Security Groups, Azure NSG/Firewall, GCP).

• Familiarity with SD-WAN and cloud networking concepts.

• Knowledge of regulatory standards such as PCI-DSS, HIPAA, NIST, or ISO 27001.

Work Environment

• Fully remote position.

• Occasional participation in on-call rotation and scheduled maintenance windows.